InjectScan

co.youraitoolsPublished by youraitools.coOfficial publisherv0.1.3Updated Oct 26, 2026

Scan text for prompt injection: risk score, verdict, matched spans. Built by Crypto Money Maker

The publisher's own server: DomainCheck

VerifiedStreamable HTTPWeb executableWeb Search & Scraping Security & Monitoring

Server details

Identifier: co.youraitools/injectscan
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Oct 22, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to youraitools.co, which also runs its endpoint. That identifies the publisher; it does not make the server's tools safe.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/co.youraitools%2Finjectscan.svg)](https://sourceweft.com/mcp/co.youraitools%2Finjectscan?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Remote scanner that checks untrusted text, web pages and MCP tool definitions for prompt injection before an assistant reads or acts on them.

What you can do: Scan raw text such as emails, documents, tool results or agent messages for injection patterns and get a risk score, verdict and matched spans
Fetch a public web page and scan its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) before browsing or summarizing it
Check MCP or function-calling tool definitions for tool poisoning in names, descriptions and schemas, up to 100 tools per call
When to use it: Useful when an assistant ingests content from outside sources — web pages, inbound email, documents, other agents' messages — or installs third-party MCP tools, and you want a pre-check for instruction overrides, jailbreaks, exfiltration URLs or hidden instructions.
Requirements: A remote streamable HTTP endpoint; no package, environment variable or header is declared, and no authentication is declared. Network access to the provider's API is required, and scan_url needs publicly reachable pages.

Before you install

The content you submit — text, page URLs and tool definitions — is sent to a third-party service for analysis, so avoid sending secrets or private material. Results are advisory risk scores, not a guarantee; the server does not block anything itself.

Installation

In SourceWeft

Open InjectScan in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/co.youraitools%2Finjectscan/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "injectscan": {
      "type": "http",
      "url": "https://api.youraitools.co/injectscan/mcp"
    }
  }
}

Tools

scan_text

Scan text for prompt injection

Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flags instruction overrides, jailbreak personas, system-prompt extraction, fake delimiters, exfiltration URLs, tool hijacking, hidden Unicode and encoded payloads (deterministic rules). Use scan_url when you only have a link (it also checks hidden HTML) and scan_tools for MCP tool definitions. Text up to 100000 characters. Free: 30 calls/day per IP shared by scan_text, scan_url and scan_tools, with full results (max 10/min; invalid input is not counted). After that the tool returns an error with the x402 pay URL ($0.003 USDC on Base, Polygon, Arbitrum One or Solana per call at https://api.youraitools.co/injectscan/v1/scan) or prepaid credits. Returns risk_score (0-100), verdict (safe | suspicious | malicious), flagged, categories[] {category, score, description}, findings[] {rule, category, start, end, text} and free_tier usage. Read-only safety signal, not a guarantee.

Parameterstextrequired

scan_url

Fetch a web page and scan it for prompt injection

Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent browses or summarizes it. Use scan_text if you already have the content and scan_tools for MCP tool definitions. Respects robots.txt and refuses private/internal hosts. Free: 30 calls/day per IP shared by scan_text, scan_url and scan_tools, with full results (max 10/min; invalid input is not counted). After that the tool returns an error with the x402 pay URL ($0.003 USDC on Base, Polygon, Arbitrum One or Solana per call at https://api.youraitools.co/injectscan/v1/scan) or prepaid credits. Returns risk_score (0-100), verdict (safe | suspicious | malicious), flagged, categories[] {category, score, description}, findings[] with location (visible or hidden), url, finalUrl, title, hidden_html {segments_checked, flagged} and page {status, contentType}. Read-only safety signal, not a guarantee.

Parametersurlrequired

scan_tools

Scan MCP tool definitions for tool poisoning

Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and schemas) before your agent installs or calls them. Use scan_text for ordinary content and scan_url for web pages. Up to 100 tools per call. Free: 30 calls/day per IP shared by scan_text, scan_url and scan_tools, with full results (max 10/min; invalid input is not counted). After that the tool returns an error with the x402 pay URL ($0.003 USDC on Base, Polygon, Arbitrum One or Solana per call at https://api.youraitools.co/injectscan/v1/scan) or prepaid credits. Returns the worst risk_score/verdict, flagged, tools_scanned, tools_flagged and tools[] {index, name, risk_score, verdict, categories, findings[] {field, rule, text}}. Read-only safety signal, not a guarantee.

Parameterstoolsrequired

Version history

v0.1.3LatestOct 22, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
LicenseNot applicable
A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.